killsec
First seen March 21, 2024Active286 claimed victims
The claims below are reproduced as posted by killsec on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Terra Energy | November 19, 2024 | ransomware_live | — |
| Equentis Wealth | November 19, 2024 | ransomware_live | — |
| Followup CRM | November 18, 2024 | ransomware_live | — |
| Dragon Capital | November 17, 2024 | ransomware_live | — |
| Buddy Loan | November 17, 2024 | ransomware_live | — |
| BluMed Health | November 15, 2024 | ransomware_live | — |
| Axpr Valve Science | November 13, 2024 | ransomware_live | — |
| Giggle Finance | November 12, 2024 | ransomware_live | — |
| National Institute of Administration | November 11, 2024 | ransomware_live | — |
| OxyHealth | November 10, 2024 | ransomware_live | — |
| Doctor 24x7 | November 4, 2024 | ransomware_live | — |
| Sumitomo | November 2, 2024 | ransomware_live | — |
| ConCash | October 28, 2024 | ransomware_live | — |
| Fortis | October 28, 2024 | ransomware_live | — |
| Edmov | October 27, 2024 | ransomware_live | — |
| Mixfame | October 27, 2024 | ransomware_live | — |
| Bliss Worldwide | October 26, 2024 | ransomware_live | — |
| Wilson Tarquin | October 25, 2024 | ransomware_live | — |
| SW Reclaim | October 25, 2024 | ransomware_live | — |
| NoBroker | October 25, 2024 | ransomware_live | — |
| Government of Brazil | October 25, 2024 | ransomware_live | — |
| Delcaper | October 25, 2024 | ransomware_live | — |
| Doctor24x7 | October 25, 2024 | ransomware_live | — |
| shipkar.co.in | October 23, 2024 | ransomware_live | — |
| autodukan.com | October 22, 2024 | ransomware_live | — |
| onedayevent.com | October 22, 2024 | ransomware_live | — |
| boloforms.com | October 22, 2024 | ransomware_live | — |
| apollohospitals.com | October 20, 2024 | ransomware_live | — |
| ask.vet | October 19, 2024 | ransomware_live | — |
| tripxoxo.com | October 18, 2024 | ransomware_live | — |
| volohealth.in | October 17, 2024 | ransomware_live | — |
| moi.gov.ly | October 16, 2024 | ransomware_live | — |
| rudrakshahospitals.com | October 14, 2024 | ransomware_live | — |
| extramarks.com | October 10, 2024 | ransomware_live | — |
| avans.com | October 9, 2024 | ransomware_live | — |
| transfoodbeverage.com | October 9, 2024 | ransomware_live | — |
| argofinance.org | October 9, 2024 | ransomware_live | — |
| healthyuturn.in | October 8, 2024 | ransomware_live | — |
| pingan.com | October 8, 2024 | ransomware_live | — |
| yassir.com | October 7, 2024 | ransomware_live | — |
| betterhalf.ai | October 5, 2024 | ransomware_live | — |
| seoulpi.io | October 5, 2024 | ransomware_live | — |
| bbgc.gov.bd | October 4, 2024 | ransomware_live | — |
| credihealth.com | October 1, 2024 | ransomware_live | — |
| telehealthcenter.in | October 1, 2024 | ransomware_live | — |
| porter.in | September 30, 2024 | ransomware_live | — |
| itap.nacc.go.th | September 30, 2024 | ransomware_live | — |
| nfe.fazenda.gov.br | September 29, 2024 | ransomware_live | — |
| poorvika.com | September 29, 2024 | ransomware_live | — |
| medicheck.io | September 23, 2024 | ransomware_live | — |
| miit.gov.cn | September 17, 2024 | ransomware_live | — |
| SuperCommerce.ai | September 16, 2024 | ransomware_live | — |
| rupicard.com | September 10, 2024 | ransomware_live | — |
| pv.be | September 9, 2024 | ransomware_live | — |
| schynsassurances.be | September 9, 2024 | ransomware_live | — |
| dvv.be | September 5, 2024 | ransomware_live | — |
| belfius.be | September 5, 2024 | ransomware_live | — |
| cda.be | September 5, 2024 | ransomware_live | — |
| mykukun.com | August 28, 2024 | ransomware_live | — |
| agra-services.be | August 28, 2024 | ransomware_live | — |
| medisetter.com | August 28, 2024 | ransomware_live | — |
| tjs.com | August 28, 2024 | ransomware_live | — |
| autonomous.ai | August 26, 2024 | ransomware_live | — |
| onedayonly.co.za | August 26, 2024 | ransomware_live | — |
| terralogs.com.br | August 23, 2024 | ransomware_live | — |
| level.game | August 22, 2024 | ransomware_live | — |
| instadriver.co | August 22, 2024 | ransomware_live | — |
| schoolrush.com | August 22, 2024 | ransomware_live | — |
| jpoint.in | August 21, 2024 | ransomware_live | — |
| startaxi.com | August 14, 2024 | ransomware_live | — |
| icarasia.com | August 8, 2024 | ransomware_live | — |
| bonatra.com | August 7, 2024 | ransomware_live | — |
| notariusze.waw.pl | August 4, 2024 | ransomware_live | — |
| fingersstore.com | July 31, 2024 | ransomware_live | — |
| stb.ro | July 30, 2024 | ransomware_live | — |
| maxcess-logistics.com | July 1, 2024 | ransomware_live | — |
| Revi | June 26, 2024 | ransomware_live | — |
| laxmicapital.com.np | May 17, 2024 | ransomware_live | — |
| agranibank.org | May 17, 2024 | ransomware_live | — |
| delhipolice.gov.in | April 3, 2024 | ransomware_live | — |
| keralapolice.gov.in | March 21, 2024 | ransomware_live | — |
| excellifecoaching.com | March 21, 2024 | ransomware_live | — |
| pbgbank.com | March 21, 2024 | ransomware_live | — |
| rabitbd.com | March 21, 2024 | ransomware_live | — |
| politiaromana.ro | March 21, 2024 | ransomware_live | — |
| TMC | February 21, 2024 | ransomware_live | — |
← NewerPage 3 of 3
Claim data from ransomware.live and RansomLook (CC BY 4.0).